Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: bpr0G02wM1Q+ULRpYHKJ925C4qIN4XCKtHrSrQ1yrmQ=
Subject key identifier: AB:40:14:84:C3:E7:0A:F4:AB:BA:EF:5F:45:07:50:04:08:55:C6:27
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019682EC2BC92CE97CA5D3E05A7273B425B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 19:00:37 +0000
Manifest this update: Tue 29 Apr 2025 19:00:37 +0000
Manifest next update: Wed 30 Apr 2025 19:00:37 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: 7Ezd3NNbgFdRDEuhFd39Ba2wRpxMc+0BskcJXZC3cEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:2b:c9:2c:e9:7c:a5:d3:e0:5a:72:73:b4:25:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Apr 29 19:00:37 2025 GMT
Not After : Apr 30 19:00:37 2025 GMT
Subject: CN=ab401484c3e70af4abbaef5f450750040855c627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:6a:11:b0:93:5f:16:9a:ee:b3:df:93:0c:
eb:1f:c5:6a:95:a4:10:67:5d:9b:b9:a1:bf:f3:e3:
ee:ee:0c:df:05:b6:31:26:ed:91:38:0d:39:28:45:
6a:e1:bd:9b:3c:fa:6d:eb:3b:e2:79:5c:03:fb:cd:
58:d8:9e:aa:7e:52:f6:6e:07:20:40:94:1a:0b:3a:
69:22:67:5a:be:30:89:93:e1:25:8d:f1:1c:bf:1e:
c1:26:29:5b:74:c9:e9:5e:86:dd:e6:3f:36:19:d4:
32:10:9a:31:8c:b4:90:b9:53:2d:1e:76:69:14:d9:
d8:b1:67:e8:81:0f:b9:6f:f4:c8:72:a4:ea:be:66:
05:d1:ca:9b:c9:d5:74:e5:22:b6:d6:6a:ef:48:4e:
6d:3d:55:8f:82:aa:f3:3d:56:57:8c:2d:ac:c0:b7:
f8:d7:48:50:bb:ab:63:cc:7f:0f:fa:9a:2a:41:9c:
a0:8a:77:d0:6b:a6:3b:04:ce:64:b5:64:c3:e8:ae:
6e:b7:f4:7b:b6:a3:52:e5:b2:5b:10:3d:30:9f:b8:
fd:72:60:39:a9:89:4c:fd:8e:17:11:d4:02:d9:fc:
c9:ae:3e:2a:4f:f2:81:e0:29:a2:f5:05:cd:ec:34:
63:56:e8:6a:7a:da:38:44:ec:d8:f2:0c:80:79:2b:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:40:14:84:C3:E7:0A:F4:AB:BA:EF:5F:45:07:50:04:08:55:C6:27
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d5:26:f5:4f:48:58:96:17:0c:7c:87:c8:16:5b:70:81:d6:
b6:62:36:b1:a0:4b:62:b5:a0:e0:79:67:78:6a:4c:1a:b5:fd:
28:31:03:25:11:bf:44:6b:4f:3d:8a:11:0c:a9:c7:0d:1c:fa:
8a:d0:a6:ca:bf:f8:24:5e:e9:6e:0f:fa:7f:f9:3c:65:b7:10:
17:90:df:4e:9d:80:31:a4:3e:76:98:21:86:a4:0a:c1:56:ef:
64:a7:74:2e:1e:ed:51:62:fd:4f:ca:54:97:ca:83:b4:ae:8a:
55:d3:48:45:66:26:da:18:49:af:b4:c4:7b:7c:02:84:92:7c:
12:c2:78:28:30:1a:c0:07:3d:42:f5:60:87:b2:50:87:71:1b:
cf:8e:0f:2a:2a:9e:71:10:e3:24:55:e5:b8:f0:2d:dc:1b:cb:
81:46:c6:3c:f5:0a:6d:c3:f3:b5:b7:26:a2:d2:aa:a6:4e:18:
90:51:e7:74:54:c5:32:6c:30:09:7e:bb:f5:13:23:cf:18:cd:
fd:df:9a:10:9f:23:fd:eb:0e:f6:6c:eb:58:db:91:c7:5b:9e:
e8:9d:50:44:e6:b2:ce:72:35:af:2e:de:ed:1d:fd:c1:d8:2f:
d5:2b:94:12:eb:3b:37:fb:5f:cd:94:04:75:b1:fd:fc:fa:0f:
62:a4:23:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaC7CvJLOl8pdPgWnJztCW0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjhiNzFmMWU3Y2E2OTUzMWRkNWRmMjU1OTUxMzU5OGRi
MWM3ZjMwHhcNMjUwNDI5MTkwMDM3WhcNMjUwNDMwMTkwMDM3WjAzMTEwLwYDVQQD
EyhhYjQwMTQ4NGMzZTcwYWY0YWJiYWVmNWY0NTA3NTAwNDA4NTVjNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZVqEbCTXxaa7rPfkwzrH8VqlaQQ
Z12buaG/8+Pu7gzfBbYxJu2ROA05KEVq4b2bPPpt6zvieVwD+81Y2J6qflL2bgcg
QJQaCzppImdavjCJk+EljfEcvx7BJilbdMnpXobd5j82GdQyEJoxjLSQuVMtHnZp
FNnYsWfogQ+5b/TIcqTqvmYF0cqbydV05SK21mrvSE5tPVWPgqrzPVZXjC2swLf4
10hQu6tjzH8P+poqQZyginfQa6Y7BM5ktWTD6K5ut/R7tqNS5bJbED0wn7j9cmA5
qYlM/Y4XEdQC2fzJrj4qT/KB4Cmi9QXN7DRjVuhqeto4ROzY8gyAeSv/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtAFITD5wr0q7rvX0UHUAQIVcYnMB8GA1UdIwQY
MBaAFCUotx8efKaVMd1d8lWVE1mNscfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTkt
ZWQzMmM1NjEyODQwLzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTktZWQzMmM1NjEyODQw
LzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNUm9U9I
WJYXDHyHyBZbcIHWtmI2saBLYrWg4HlneGpMGrX9KDEDJRG/RGtPPYoRDKnHDRz6
itCmyr/4JF7pbg/6f/k8ZbcQF5DfTp2AMaQ+dpghhqQKwVbvZKd0Lh7tUWL9T8pU
l8qDtK6KVdNIRWYm2hhJr7TEe3wChJJ8EsJ4KDAawAc9QvVgh7JQh3Ebz44PKiqe
cRDjJFXluPAt3BvLgUbGPPUKbcPztbcmotKqpk4YkFHndFTFMmwwCX679RMjzxjN
/d+aEJ8j/esO9mzrWNuRx1ue6J1QROayznI1ry7e7R39wdgv1SuUEus7N/tfzZQE
dbH9/PoPYqQjuQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:11 2025 by rpki-client